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Abstract 

Truth maintenance systems have been used in recently developed 
problem solving systems. A truth maintenance system {TMS) is designed to 
be used by deductive systems to maintain the logical relations among the 
beliefs which those systems manipulate. These relations are used to 
incrementally modify the belief structure when premises are changed, giving 
a more flexible context mechanism than has been present in ear I i er 
artificial intelligence systems. The relations among beliefs can also be 
used to directly trace the source of contradictions or failures, resulting 
in far more efficient backtracking. 

In this paper a new approach is taken to truth maintenance 
algorithms. Each belief, or proposition, can be in any one of three truth 
states, true, false, or unknown. The relations among propositions are 
represented in disjunctive clauses. By representing an implication in a 
clause the same algorithm that is used to deduce its consequent can be used 
to deduce the negation of antecedents that would lead to contradictions. A 
simple approach is also taken to the handling of assumptions and 
backtracking which does not involve the non-monotoni c dependency structures 
present in other truth maintenance systems. 
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Introduction 


Truth maintenance systems have been used in recently developed 
problem solving systems [Stallman and Sussman 1978] tDoyle 1978a]. A truth 
maintenance system (TfIS) is a domain independent system for maintaining the 
consistency and we I I f oundedness of a set of be I i ef s. It is an i nheren I ty 
propositionaI mechanism which is designed to be used by deductive systems 
to maintain the logical relations between the propositions they generate. 
The truth maintenance system also simulates the effects of those relations 
to the extent that it can be used to incrementally modify the belief 
structure and retract assumptions when they lead to contradictions. This 
process can be used to realize substantial search efficiencies in that 
contradictions, or failures, only result in backtracking over relevant 
assumptions. 

An example of the use of a TMS would be an algebraic manipulator 
which is capable of using piecewise approximations to functions. In such a 
manipulator each equation is considered to be a proposition. When the 
manipulation of some set of equations results in a new equation, the 
equations used are recorded in the TMS as supporting the newly generated 
equation. A piecewise linear approximation to a function can be 
represented by an implication between equations such as (> x -.25) a (< x 
.25) -> (= (sin x) x), To use such an approximation of (sin x) the 
manipulator might have to assume that x was in the required range. If at 
some later time a value for x is found that is inconsistent with the 
assumptions, then the manipulator need simply announce to the TMS that the 
two conflicting equations, the assumed inequallity and the found value, are 
mutually contradictory. The TMS will then retract a relevant assumption. 
In such cases the TMS might instead be made to state all the assumptions 
upon which the contradict ion depends and leave the choice of removal up to 
the manipulator. The use of piecewise linear approximations to the 
behavior of transistors, is one of the applications of truth maintenance 

used by Stallman and Sussman in electronic circuit analysis [Stallman and 
Sussman 1976). 

In addition to the search efficiencies which are gained in dependency 
directed backtracking, the recorded relations between beliefs can be used 
to justify or explain the beliefs of the deductive system. Such 
explanations are useful in understanding and verifying the results of 
problem solvers. 

This paper introduces a new approach to the concepts and mechanisms 
of truth maintenance. The basic idea is to represent all logical relations 
between proposition in disjunctive clauses. For example implications of 
the form PI a P2 a P3 .. . -* Q wi I I be represented as -*P1 v -P2 v -»P3 ... 
v Q. Notice that in the clause represent a t i on the distinction between 
antecedents and consequences disappears and therefore the negation of an 
antecedent in the i mp I ication can be as easi ly deduced as the consequent. 
This feature of the representat i on eliminates much of the backtracking 
mechanisms which are present in other truth maintenance systems [Stallman 
and Sussman 1976] [Doyle 1978a]. Another common relation among propositions 
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we wish to be able to express is the notion that some set of them are 


mutually contradictory, formally -(PI a P2 a P3 ... 
is transformed via DeMorgan’s laws into the clause 
-Pn. This again eliminates the need for certain 
present in other systems. 


a Pn). This re I at i on 
-PI v -P2 v -P3 ... v 
backtracking mechanisms 


The propositions in other systems have only two truth states called 
"in" and "out", which represent "known to be true" (a well founded proof 
exists) and not known to be true" (not in) respectively. My system uses 
the three more intuitive truth states of true, false, and unknown (hence 
the title of this paper). This eliminates the need of a separate entity to 
represent the negation of a proposition. 

The notion that the truth of some proposition is an assumption is 
simply represented by appropriately tagging the proposition. When the 
assumption is found to lead to a contradiction (a clause that cannot be 
satisfied) the truth value is automatically retracted. I believe that this 
mechanism has most of the non-monotonic power of Doyle’s system, but in a 
much simpler form (see (Doyle 1978a) for a discussion of non-monotinicity). 

At the end of the paper are a series of appendices which give the 
details of the implementation and an overview of its use. 
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The Algorithm 

The basic tru(h maintenance system (TMS) object types are literals 
(TMS nodes), truth values, terms, and clauses. TMS nodes represent 
assertions of the deductive system using the TMS. Such assertions might be 
of the form (COLOR A RED) or (MODE TRANSISTOR-1 BETA-INFINITE), but their 
Tf1S representation is simply a unique atom, i.e. a node. Nodes can have 
three possible truth states, true, false, and unknown. A truth value is a 
true or false value of a node. Changing a node from an unknown state to 
either true or false will be referred to as adding a truth value, since it 
is conceptually adding information. Changing a node from true or false to 
unknown will be referred to as removing a truth value, as it is 
conceptual ly removing information. A term is an association of a node uith 
a value and is true when the node has that value, false when the node has 
the opposite value, and unknown otherwise. 

The relations between the truth values of the nodes are represented 
by propositional formulas in conjunctive normal form. This means that 
there is a set of disjunctive clauses which must all be satisfied by the 

values of the nodes. Each clause contains a set of terms, one of which 
must be true. 

Justifications for assertions are represented as clauses. For 
example, if an assertion represented by the node C was implied by 
assertions represented by A and B, then the clause would be ((A. false) or 
(B. false) or (C.true)). The fact that some set of assertions are mutually 
contradictory is also represented in a clause. For example, if assertions 
represented by A,B, and C would lead to a contradiction, then the clause 
would be ((A.false) or (B.false) or (C.false)). 

Each clause can be given multiple interpretations. For example the 
clause ((A. false) or (C. false) or (D. true)) might be thought of as (A and 
C) -> D, or it could be thought of as (-0 and C) -> --A. This clause can 
also be thought of expressing the fact that a contradiction results from A, 
C« and -'D all being true simultaneously. Even more bizarre 
conceptualizations of the clause are possible, such as (A -> (-O -> -C)). 
Interpretations of the last type are useful in understanding certain 
backtracking techniques to be discussed later. 


, Adding Clauses and Truth Values 

Clauses can be directly added to system at any time by a top level 
procedure and are instantly checked for possible deductions. Truth values 
can be added in two ways. The simplest is to add a truth value for a node 
as a premise. In this case no other reason for believing the value is 
needed. The second way is to deduce a truth value from a clause. Suppose 
ail the terms of a clause are known to be false with one exception, which 
is a node whose truth value is unknown. In this case the one remaining 
node can have the appropriate truth value added to satisfy the clause. 
This is the only way truth values are deduced from the clauses in the TMS. 
There are however valid deductions which depend on more than one clause. 
For example given the two clauses A -> B and -A -> B it is possible to 
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deduce B. Such deductions are only made indirectly when certain types of 
contradictions arise (contradictions will be discussed in later sections). 

Uhen a truth value is added a check must be made to see if new truth 
values can be deduced from the added information. This is done by 
examining clauses which contain the term whose truth value has been added. 
Since clauses which contain the term which is made true are automatically 
satisfied, the only clauses that must be checked for possible deductions 
are those that contain the term which is made false. Since truth values 
are added recursiveI y, a I I truth values that can be deduced via chains of 
such one-step clause deductions are added. 

For reading the following code it will be useful to refer to Appendix 
II in which the data structures are explained. The code presented below is 
a slight simplification of the actual code used here only to formalize the 
algorithm as described so far. It does not contain the mechanisms for 
hand Ii ng contradict ions which wiI I be explained later. The complete code 
is given in Appendix III. 

(DEFUN SET-TRUTH (NODE VALUE SUPPORT) 

(SUPPORT IS EITHER THE RTOH 'PREMISE OR 
jH CLAUSE UHICH IS BEING USEO TO OEOUCE VALUE 

(PROG (> 

(COND ((NOT (EQ (GET NODE ’TRUTH) ’UNKNOWN)) 

(ERROR ’SET-TRUTH—VALUE-NOT-UNKNOWN NODE))) ’ 

(PUTPROP NODE VALUE ’TRUTH) 

(PUTPROP NODE SUPPORT ’SUPPORT) 

t 

(FOR EACH CLAUSE UHICH CONTAINS THE TERN UHICH BECOHES FALSE 

(SUBTRACT ONE FROtl THE NUMBER OF TERNS UHICH CAN POTENTIALLY SATISFY IT. 

\ 

t 

(NAPC (FUNCTION (LAMBDA (CLAUSE) 

(PUTPROP CLAUSE (1- (GET CLAUSE ’PSAT>) ’PSAT))> 

(GET NODE (GET VALUE ’OP-CLAUSES))) 

(NAPC (FUNCTION OEOUCE-CHECK) 

(GET NODE (GET VALUE ’OP-CLAUSES))))) 

(DEFUN DEOUCE-CHECK (CLAUSE) 

(PROG (F) 

(COND ((ANO <= (GET CLAUSE ’PSAT) 1) 

(SETQ F (PCONSEQ CLAUSE))) 

(SET-TRUTH (CAR F) (COR F) CLAUSE))))) 

(PCONSEQ FINDS A NODE IN THE CLAUSE UHICH HAS A TRUTH STATE 
(OF UNKNOUN AND RETURNS A DOTTED PAIR OF THE NODE AND THE 
(VALUE UHICH THE NODE MUST HAVE TO SATISFY THE CLAUSE. 

It would be possible to check for more complex deductions. For 
example if there are two clauses (P or Q) and (P or -Q) it is valid to 
deduce P. In general, arbitrary deductions could be done by deciding 
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whether the addition of some truth value inevitably leads to a 
contradiction. If this is indeed the case then the opposite truth 
value could be deduced. The problem with this seemingly 
straightforward approach is in deciding if something must lead to a 
contradiction, A contradiction is inevitable when the set of clauses 
can not be satisfied by any truth values for the nodes which are 
unknown. Therefore in order to decide if a contradiction is inevitable 
the system must decide if the set of clauses can be satisfied by the 
remaining unknown nodes. This is a standard problem of propositional 
logic and is known to be NP complete. This means that there are strong 
suspicions that it must require exponential time to solve. Therefore, 
in order to avoid such a combinatorial explosion I restrict myself to 
one clause deductions. This still gives all of the intuitive deductive 
power of a clause while preserving computational expedience. 


Removing Truth Values 

Truth values can be removed as well as added. This can happen 
when the user of the TMS decides that a premise is no longer known, or 
it can happen when assumptions are retracted in backtracking. Uhen 
this happens it is necessary to remove ail truth values that critically 
depend on the lost information. Truth values are used for deductions 
only by clauses that contain the term they make false. Therefore 
clauses which contain the term which was previously false, but is now 
unknown, are examined. If any of these clauses were used in the 
original deduction of some truth value, then the value deduced is a 
candidate for removal. 

In order to determine whether a clause was the one originally 
used to deduce a truth value, each node has associated with it a 
support. The support is only used when the node has a known truth 
value, and is either a premise marker or the clause which was used in 
the original deduction of the truth value. Since the support is always 
assigned when a truth value is added, the truth values of the other 
nodes in the support can in no way depend on the supported value. This 
means that the support is wel I founded and the set of premises that a 
truth value is deduced from can always be determined by tracing 
supports without fear of loops. 

Care must be taken that values are not removed that can be 
deduced in other ways. One attempt at solving this problem is to check 
a I I clauses that contain the node whose value is being considered for 
removal to see if any can be used to deduce the value. However the 
following example demonstrates the problem with this approach. 
Consider the clauses: 











Suppose that \f\ was added as a premise and then later removed. 
Now when A Ls removed there is still a clause, C -> B, that can be used 
to deduce B. The problem with using this clause to support the truth of 
B is that, since C depend on B, B would be used to support itself. The 
solution to this problem is to first recursively remove all candidates 
for removal (therefore removing all truth values that critically depend 
on them). After this has been done clauses which contain the terms 
whose values have been removed can be checked for deductions. If 
con tr ad i c t i ons are present in the system, then it is possible that when 
a truth value is removed its opposite value can then be deduced 
(contradictions will be discussed in more detail a little later). 
Whenever a clause is used to deduce a truth value, the clause becomes 
the support for the value. Again since the support is found before the 
truth value is added, it must be well founded. An important point is 
that if a premise is removed by the TNS user, but the removed truth 
value can be deduced from other premises in the system, then the truth 

value remains, with a clause as its support instead of the premise 
marker. 

In reading the following code it will again be helpful to refer 
to Appendix II in which the data structures are explained. The code 
presented here is a simplification of the actual code used only to 
formalize the algorithm as discussed so far, i.e. it does not deal with 
contradictions and assumptions which will be discussed later. The 
complete code is presented in Appendix III. 
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(OEFUN REMOVE-TRUTH (NODE) 

(PROG (VALUE! 

(SETQ VALUE (GET NODE ’TRUTH)) 

(COND ((EQ VALUE ’UNKNOWN) 

(ERROR ’REMOVE-TRUTH—VALUE-NOT-PRESENT NODE))) 

(PUTPROP NODE ’UNKNOWN ’TRUTH) 

(PUTPROP NODE NIL ’SUPPORT) 

!FOR EACH CLAUSE WHICH CONTAINS THE TERM UHICH UBS FALSE 
;FIDO ONE TO THE NUMBER OF TERMS UHICH CAN POTENTIALLY SATISFY IT 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 

(PUTPROP CLAUSE ’PSAT (1+ (GET CLAUSE ’PSHT))) )) 

(GET NOOE (GET VALUE ’OP-CLAUSES))) 

;REMOVE TRUTH VALUES UHICH THESE CLAUSES HAD BEEN USEO TO DEDUCE 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 

(PROG (F) 

(COND ((AND (> (GET CLAUSE ’PSAT) 1) 

(SETQ F (CAR (CONSEQ CLAUSE))) 

jCONSEQ FINDS A NODE UHICH SATISFIES THE CLAUSE. 
(EQ CLAUSE (GET F ’SUPPORT))) 

(REMOVE-TRUTH F)>)))) 

(GET NOOE (GET VALUE ’OP-CLAUSES))) 

;CHECK FOR ANY POSSIBLE DEDUCTIONS OF VALUES FOR THE 
;NODE UHOSE VALUE UAS REMOVEO 

(MAPC (FUNCTION OEDUCE-CHECK) (GET NOOE ’POS-CLAUSES)) 

(MAPC (FUNCTION DEOUCE-CHECK) (GET NOOE ’NEG-CLAUSES)) )) 


' Contradictions 

1 * 

Consider a case in which a clause is added that contains only 
terms which are false. The clause is in contradiction with the rest of 
the data base and is therefore referred to as a contradiction. Since a 
clause is a contradiction only when all of the terms in it are false, a 
contradiction is said to depend on the truth values of the terms in it. 

It is conceivable that a TfiS data base could contain several such 
contradictions. 

The addition of clauses is not the only way that contradictions 
can occur. Consider the two implications (P Q) and (P -Q). If no 
truth values are known for P or Q, then no deductions are made since 
each clause has two ways in which it might be satisfied. If a true 
value for P is determined, then one of the above clauses would be used 
to deduce a truth value for Q, while the other clause would become a 
contradiction. It is important to realize that in cases where both a 


\ 


truth value and its negation can be proven, one of the truth values is 
chosen and all clauses which could have implied its negation become 
contradictions. When adding a truth value leads to a contradiction, it 
is possible to add new clauses that allow deductions based upon this 
fact* In the above example the clause ( -P ) can be deduced from the 

two original clauses# To get a better feel for the general case 
consider the example: 

clause interpretation 


((A.true)(B.false)(C.true)) 

(“"•A a B) C 

((C. false)(D.false) (E. 

true)) 

(C a D) -* E 

((A. true) (F. fa 1 se) (E. fa 1 se)) 

(-»A a F) -£ 

known 

va 1 ues 


B 

true 


D 

true 


F 

true 

* 


Now in this case if a false value for A is added the first clause 
can be used to deduce C. Then the second clause can be used to deduce 
E# At this point however the third clause has become a contradiction# 
The relationship between the three clauses is shown in figure one# In 
the figure each clause is represented by a pair of right angled 
implication pointers which should be interpreted as B {-A -4 C). The 
new clause which can be added in this situation is (B a D a F) A 

To see how new clauses can be constructed from the appearance of 
contradictions in general it is necessary to closely examine how 
contradictions result from the addition of truth values. At some point 
a truth value is added which removes the last chance of satisfying some 
clause, say Cl# The term that became true when this value was added 
will be called FI (E in the above example). At the instant before this 
truth value is added Cl could have been used to deduce the opposite 
value# In a quiescent data base no such clause can exist since al I 
possible one step deductions are made# This means that a false truth 
value was added for some term in Cl (A in the above example), but that 
Cl became a contradiction before it could be checked for deductions# 
This second term wi I I be called F2. All possible deductions from the 
addition of any truth value are made when the value is added, and Cl 
could potentially have been used to deduce - , F 1 upon the addition of 
-F 2 # Therefore the truth value of FI, which caused Cl to be a 
contradiction, must also be a deduction from “^F2# This situation is 
pictured in figure two. 

In the figure each pair of right angled implication pointers 
represents a clause. The clauses should be interpreted as ((F C1 1 a 

Cl i 
E 2 A •••* “ > *“"E2 -> “’El)). Now if all the involved clauses 



(& a 0 A F) -* A 

Figure 1. 

An example of clause formation as a result of a contradiction. The 
addition of-*A causes C3 to become a contradiction 



( ( ^9 * ^ ^ A f\ J A * r * J f~£. 

Figure 2. 

The general case of clause formation resulting from a 
contradiction. This is the general case in which the addition of-*F2 causes 
Cl to become a contradiction. 








contained only two terms, then the clause ( F2 ) could be added. 
However, in the general case the contradiction results only when the 

peripheral terms are true. In other words (F^i a F^o a ... F C2 i a 

r-C2 . . ^ A 

F 2 A ....) -> F2. This implication then is the clause which is 

added. The clause is formed during the unrolling of the recursive 

calls to the procedure for adding truth values. 

Hopefully the added clause will allow the deduction of the 

negation of the truth value that lead to the contrdiction, ->F2 above, 

in those cases when it would again lead to the same contradiction. 

While the added clause is always valid, it does not always produce this 

desired result. The reason for this is that some of the peripheral 

truth values might also be deductions from the added value. In this 

case when the added value (call it --F2 as above) is retracted, some of 

the peripheral values will also disappear and its negation will not be 

deducible. However if ->F2 is again added then the clause generated 

above will become a contradiction at the point at which all the 

peripheral values become true. This will lead to the generation of yet 

another clause. If F2 is still not deducible upon the retraction of 

->F2, then further additions of -F2 will generate still more clauses. 

It is always possible to force the system to deduce the negation of a 

truth value that leads to a contradiction by such "pulsing" of that 

value. I would like to emphasize that it would require a quite complex 

structure to require more than one or two such "pulses". 


Default Values and Backtracking 

In many problem solving situations it is necessary to make 
assumptions that have no solid reason for belief. If such assumptions 
lead to contradictions then they should be retracted. Assumptions are 
represented as a subset of the premise values called default values and 
are marked in the implementation by having the atom ’default as their 
support. Whenever a node is given a default support the value 
supported is placed under a default property of the node. This value 
is then added whenever no other truth value for the node can be 
deduced. 

Hhen a contradiction is present in the data base an attempt is 
made to remove it by removing default truth values. This involves 
tracing the dependency relations (via the supports associated with 
nodes) to find the premises upon which the contradiction depends and is 
therefore caI Ied dependency directed backtracking. When a default 
value is found upon which the contradiction depends, it is removed. 
Hopefully the contradiction becomes an implication and can then be used 
to deduce the opposite of the default value removed. If the opposite 
of the default is not deduced, then the default value is added back. 
At this point, since the contradiction must reappear, the backtracking 
repeats and again the default value is removed. Due to the new clauses 
generated each time the contradiction appears, the negation of the 
default value must become deducible, and the backtracking halts when 


either no contradictions are left, or the contradictions that are 
present do not depend on any default values. 


Clause Values and Hierarchies of Assumptions 

So far there has been no mention of the removal of clauses from 
the data base. Uhile the physical removal of clauses does not occur, 
there is a mechanism for making them impotent. This is done by adding 
a node to each clause which represents its validity. For example the 
clause (A or B) might become (-'Cl or A or B) where Cl represents the 
validity of the clause. Now as long as Cl is true the clause acts as 
expected, but if the truth value Cl is removed, then the clause is 
effectively removed. Each time a clause is added, some reason is given 
for believing it. This reason is used as the support for the truth of 
the node which represents the clause. This is usually useful only as a 
device for keeping track of the source of clauses for the TMS user. 

However it has one'very important use in allowing assumptions to have 
antecedents. * 

Suppose that in reasoning about animals it is first assumed that 
they are mammals. Furthermore suppose that in reasoning about mammals 
it is assumed that they are dogs. The assumption that some animal is a 
dog might depend on the assumption that it is a mammal. In general 
then assumptions must be. able to take antecedents, some of which might 
be other assumptions. Dependencies of this form can be represented in 
the TMS by a clause whose clause node has a default support. In the 
example let the mammal assumption be represented by A1 and the dog 
assumption by A2. Now A1 can be assumed (given a true default value). 
Once this has been done A2 can be added by adding the clause (A1 -> A2) 
and giving the clause node a true default value. The clause allows the 
deduction of A2 only if A1 is believed, also A2 can be removed as an 
assumption during backtracking by removing the default truth value of 
the added clause. 

Since clause nodes are no different than any other nodes, removal 
of their default truth values could be taken care of by the 
backtracking algorithm already described. However, in backtracking it 
is desirable to remove first assumptions upon which no other 
assumptions depend. In chess for example one normally considers 
several responses to a given move before going on to the next move. 
This helps prevent the thrashing involved in removing and adding many 
assumptions at once. 

A minor modification to the backtracking algorithm allows this 
selection of the default values. The number of supporting clauses that 
must be traced back from the contrad i c t i on to find a premise are 
counted. There may be several paths of supports that lead to a given 
premise, and in this case the maximum distance is used. Now if some 
default value implies some other assumption, then it will always appear 
at a greater distance from the contradiction than the assumption it 
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implies. This is because it will 
beneath the implied assumption, 
achieved by choosing for removal 
maximum distance from the contradi 


always appear in the support chains 
In view of this fact, our goal is 
the default value with the minimum 
ction. 
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• Comparison with Other Work 

There are several systems which use explicit justifications for 
beliefs. The work which is most closely related to the TMS presented 
here is that of Stallman and Sussman [Stallman and Sussman 197G1 and 
Doyle [Doyle 1978a). The basic difference between these systems and my 
TMS is in the mechanisms used for dependency directed backtracking. In 
both of these systems each assertion has only two truth states, 
believed and unknown, called "in" and "out" respectively. Since no 
assertion can be false in such a system, additional mechanisms are 
needed to prevent the belief of sets of assumptions known to be 
contradictory. In Stallman and Sussman’s ARS system the assumptions 
underlying a contradiction are placed in a NOGOOD assertion. This is 

used by additional mechanisms which prevent the set of assumptions from 
being believed. 

Jon Doyle has completed a master's thesis on the implementation 
of a general purpose truth maintenance system (TMS) [Doyle 1978a]. His 
TMS employs the notions of "in" and "out" to represent the truth values 
of assertions. If an assertion is believed by the system then its TMS 
node is "in". If the assertion is not believed, i.e. either known to 
be false or simply unknown, then its TMS node is "out". To make a 
distinction between simply not knowing something’s truth value and 
knowing that it is false, two TMS nodes are required, one for the 
assertion and one for its negation. If the assertion has an unknown 
truth value, then both nodes are "out". If the truth value is known 
then one of the nodes is "in" and the other is "out". An important 
point is that in Doyles system the notion of a contradiction is 
completely seperate from the justifications. A node must be created 
which is declared to be a contradiction and then a justification of 
this contradiction node is installed for each set of nodes which are 
mutaully contradictory. Specifically a contrdiction node must be 
implied by each pair of nodes representing an assertion and its 
negation. If this is not done then the system will have no problem 
with keeping both of these nodes in, in other words believing both an 
assertion and its negation. 

In Doyle's system a mechanism of major importance in backtracking 
is conditional proof. A conditional proof can be thought of as a TMS 
node which is true whenever a certain implication among other TMS nodes 
is true. Therefore a conditional proof is defined in terms of the 
implication it represents, in other words as a set of antecedents and a 
consequent. To take an example suppose that the implication AaBaC -» D 
is present in some TMS. A conditional proof node of D with respect to 
A and B would represent the truth of the implication AaB -» D. Now if C 
were known to be true then the implication represented by the 
conditional proof would be true and therefore also the "CP" node. This 
can be stated more formally as C -» (AaB -> D). 

Doyle’s TMS uses unidirectional justifications to keep track of 
consequences and antecedents of beliefs. To achieve dependency 
directed backtracking in such systems it is necessary to trace the 
antecedents of a failure (or contradiction) and then to blame the 



contradict ion on some set of assumptions. Once this is done it is also 
necessary to add implications for the negations of each assumption to 

prevent the set of assumptions from being again believed at some later 
time. 


Doyle’s TMS also uses a non-monotonic dependency structure. This 
means that truth of a node can depend on another node being unknown. 
In such cases whenever the unknown, i.e. "out", node becomes known, 
i.e. in , the dependant node becomes "out". Whenever an assumption is 
made, an node representing its negation is created. The assumption is 
then made to depend on its negation being unknown. This can be 
understood as expressing the notion "I will believe it to be true as 
long as I cannot prove 'that it is false". When a contradiction is 


found which depends on some set of assumptions a conditional proof is 
constructed for each assumption representing the implication of the 
contradiction by the assumption. This conditional proof is then used 


to imply the negation of each assumption when that assumption would 
lead to the contradiction. Since an assumption depends on its negation 
being "out", when the negation becomes "in" the assumption becomes 

it _ ,, 4. n ' 

out . 


The implementation of the conditional proof mechanism is however 
not complete. If the antecedants of the implication a conditional 
proof represents are not "in", then it is extremely difficult and 
computational expensive to check the actual truth value of the 
conditional proof, Doyle’s TMS "CP" nodes are "in" in only a subset of 
the cases in which they could actually be shown true. For example the 
conditional proofs which result from a contradiction are each 
associated with the set of assumptions upon which that contradiction 
was blamed. The negation of one of these assumptions is only justified 
when all the other assumptions in that specific set are believed. 
There fore the conditional proof will not justify the negation of an 
assumption when the assumption can combine with other information to 
give the contradiction. New assumptions which lead to old 
contradictions are also not prevented from being believed. By using 
the contradiction itself as an active deductive agent, my TMS can make 
such deductions and avoid backtracking entirely in many such 
situations. 

In my TMS a contradiction is only a clause which cannot be 
satisfied. Therefore, if a truth value of one of the nodes in the 
clause is removed, the clause will be used to deduce the opposite truth 
value for this node. This allows the direct deduction of false values 
for assumptions which would lead to contradictions. The main advantage 
of this system is the tremendous conceptual and programming simplicity 
achieved. However it is more than just a simplified implementation of 
the previous systems. Because no specific set of assumptions is chosen 
upon which to blame a contradiction, new assumptions which would lead 
to the contradiction can also be proven false. However the difference 
this makes in the number of contradictions encountered is small 
compared to the savings given by any form of dependency directed 
back tracking. 

I have not ^implemented any conditional proof mechanism for the 


simple reason that I did not have any application to justify its 
existence. Doyle’s TNS uses conditional proof to implement a mechanism 
for levels of abstraction. This is useful in condensing explanations 
of beliefs. The exploration of such uses of conditional proof and its 
relation to the algorithms presented here would be an interesting topic 
for further research. Also there are probably uses for the non¬ 
monotonic dependency structure present in Doyle’s TMS other than the 
identification of assumptions. The incorporation of such mechanisms 
into this algorithm and the investigation of more sophisticated 
applications would also be worthwhile. 
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Appendix I — A User’s Guide 

This is a summary of the top level procedures which can be used 
to interface the TUS with any deductive system. The procedures 
descibed here can be loaded into lisp on MIT-AI by evaluating (FASLOAD 
TMS FASL DSK DAM). 

t 

(TMS-INIT) 

This procedure initializes the TMS data structures. 

(MAKE-DEPENDENCY-NODE <assertion> <when-true> <when-false> <when-unknown>) 

This procedure creates and returns a new TMS node to represent 
the assertion which is passed as an argument. The node returned is an 
atom which has the assertion placed on its ’ASSERTION property. <when- 
true> is a function to be applied to the assertion when the node 
becomes true. <when-fa!se> and <when-unknown> are similarly functions 
to be used when the node becomes false and unknown respectively. Any 
of the three func t i on , arguments can also be nil in which case no action 
is taken upon the correspoding transition of truth state. 

The. truth state of the node is available as its ’TRUTH property 
which is either 'TRUE, ’FALSE, or ’UNKNOWN. The node is initially 
assumed unknown and must be forced true via either SET-TRUTH or the 
addition of a clause which causes its deduction. <when-true> will be 
applied when this happens. The node can never go directly from being 
true to being false, or vice-versa, it must first pass through a state 
of being unknown and therefore an application of <when-unknown>. 

(SET-TRUTH <node> <val ue> <reason>) 

This procedure adds truth values. The first argument must be a 
TMS node and the value must be either ’true or ’false. An error 
results if the node does not have an initial truth state of unknown. 
<reason> should be a representation of the reason for believing the 
truth value and, except for the special atom ’DEFAULT described below, 
is not used by the TMS other than placing it on the ’EXPLANATION 
property of the node for the convienience of the TMS user. All truth 
values which are given via an external call to this procedure are 
considered premises by the TMS and their 'SUPPORT property is the atom 
’PREMISE. 

An internal form of this procedure is used to add truth values 
deduced from clauses. In this case the support is a clause. All truth 
values that can be deduced in one step clause deductions from any added 
truth values are also added. If a contradiction results from the 
addition of a truth value, a new clause is generated and added as 
described in the section on contradictions 
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(ADD-CLAUSE <clause> <reason>) 

This procedure adds a clause to the TMS data base. The clause 
argument must be a list of dotted pairs. Each pair is a TMS node 
dotted with either ’true or ’false to represent the node or its 
negation respectively. For example: 

(SETQ A (MAKE-DEPENDENCY-NODE ’HUMAN-TURING nil nil nil)) 

(SETQ B (MAKE-DEPENDENCY-NODE ’FALLABLE-TURING nil nil nil)) 

(ADD-CLAUSE (list (cons A ’false ) (cons B ’true)) ’HUMAN-FALLABILLITY) 

Would add the clause: 

(-CLAUSE-N or -HUMAN-TURING or FALLIBLE-TURING) 

Which can be more intuitively understood as (HUMAN=FALLAB ILLI TY -» 
(HUMAN-TURING -> FALLABLE-TURING)). Clause-n represents the TMS node 
generated to represent the truth value of the clause and is given a 
true valus as a premise with an explanation property of <reason> as in 
SET-TRUTH. The clause node is useful I both in generating explanations 
and in remo.ving clauses when desired (making the clause node false 
effectively removes the clause). The clause node is returned as the 
value of ADD=CLAUSE. 

(T\ DEFAULTS 

The use of the atom ’DEFAULT as the reason argument in either 
SET-TRUTH or ADD-CLAUSE has a special meaning. It is the way in which 
assumptions are announced to the TMS. A node or clause given a reason 
of ’DEFAULT is said to have a default truth value. Such nodes and 
clauses act just like any other untill contradictions appear. If any 
contradiction can ever be traced to a node with a default value, then 
the value for that node will be automatically retracted by the TMS. 
Similarly if a contradiction can be traced to a deduction from a clause 
with a defauIt vaIue, then the clause will be invalidated and the 
deduction retracted. This is the way in which this TMS handles the 
non-mono tonic functions performed in Doyle’s TMS (Doyle 1978a]. 

Notice how default clauses can be used to structure assumptions. 
Suppose for example that you want to assume that grocery stores have 
peas. This assumption can be captured in a clause which represents the 
imp 1 ication grogery-store -* has-peas. The clause would be given a 
default support to announce that it is an assumption. This is 
described in more'detail in the section on default truth values and 
hierarchies of assumptions. 

If it is desired not to have the TMS do automatic backtracking 
then the assumptions simply need not be announced to the TMS. 


♦ 


V 



21 


(REMOVE-TRUTH <node>) 

This procedure removes the truth value of the node which is 
passed as an argument. An error results of the node already has an 
unknown truth state. All truth values which critically depend on the 
removed value are, also automatically removed. At the end of the 
removal process nodes whoes truth values were removed, but which have 
default values, have there default values added via SET-TRUTH. It is 
important to realize that truth values which can be duduced from other 
knowledge in the TMS will not be removed. Such truth values can only 
be removed by removing the premises or clauses from which it can be 
deduced. Clauses are removed by removing the truth value of their TMS 
nodes. 

(UHY <object>) 

<object> may be either a node or a clause (more specifically a 
# contradiction, which is a clause which cannot be satisfied). I will 

first consider the case where <object> is a node. In this case the 
procedure returns the justification for the belief in the truth value 
of the node. If the node has truth state of unknown then nil is 
returned. If the value of the node is a premise, then the atom 
’PREMISE is returned. Otherwise it returns a list of the nodes whoes 
truth values were used to deduce the truth vaue of <node>. The clause 
node of the supporting clause will appear first on the list. Because 
of the internally generated' clauses which result from the 
contradictions it is possible that other nodes on this list are clause 
nodes. Clause nodes can be identified in that there ’ASSERTION 
property is the atom ’CLAUSE. 

If <object> is a clause then Uhy returns a list of the nodes 
contained in it. The clause node comes first. It is important to note 
the distinction between a clause and a clause node. The former 
represents the actual clauses used by the TMS and it is these which 
appear on the list of contradictions described below. Clause nodes on 
the other hand represent the vallidity of a clause and are used for the 
recording the reasons for belief in clauses and for removing clauses as 
described above. 

UHY can be used to do dependency directed backtracking outside of 
the TMS in cases where more controle over the choice of assumption 
removal is desired. 


All contradictions tha,t occur in the TMS are placed on a list which is the 
value of the global atom CONTRA-LIST. If there are no contradictions then 
the CONTRA-LIST will have value nil. A contradiction is simply a clause 
which cannot be satisfied. 
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Appendix II — The Data Structures 

i 

Nodes 

Nodes represent assertions or any logical items that take on 
truth values. Nodes are represented by atoms with the following 
properties: 

TRUTH 

1. • • • • 

This properties can have three values, ’true,* fa Ise, and 
’unknown, which represent the truth state of the node. 

SUPPORT 

This property gives the support for a truth value of the 
node. It is either the atom ’premise or a clause if the node has a 
truth value, and is nil if the node has a truth property of 
’unknown. 

POS-CLAUSES 

This is the!list of clauses which contain the node. 

NEG-CLAUSES 

This is a list of clauses which contain the negation of the 

node. 

NAKE-TRUE 

MAKE-FALSE 

MAKE-UNK 

These are optional properties which give functions to be 
applied to the ASSERTION property when the node undergoes the 
appropriate transition of truth state. 

DEFAULT 

This applies only to nodes that have default truth values and 
is either ’TRUE or ’FALSE. 

ASSERTION 

This is the assertion external to the TMS that the node is 
representing. . 

EXPLANATION 

This is the reason for believing a node which is a premise, 

e.g. a node which was set true or false for reasons external to the 
TMS. 

True and False 

True and ’false are atoms with the following properties. 

TRUE ’ r 

OPPOSITE =>. ’FALSE 



CLAUSES => ’POS-CLAUSES 
OP-CLAUSES => 'NEG-CLAUSES 
EFFECT => ’MAKE-TRUE 

i 

FALSE : ! 

OPPOSITE' => ’TRUE 
CLAUSES => ’NEG-CLAUSES 
OP-CLAUSES => ’POS-CLAUSES 
EFFECT => ’MAKE-FALSE 


CIauses 


Clauses are atoms with the following properties 

* 

CLAUSE-LIST 

This is the list structure which contains the nodes and 
associated truth values which make up the clause. It is a list of 
dotted pairs each of which is a node dotted with the truth value it 
has in the clause. 

PSAT 

This is the number of nodes which either satisfy the clause 
or could potentially do so. If this number is 1, and there is a 
node with an unknown truth value in the clause, then the clause can 
be used to deduce a truth value for the node. If this number is 0 
then the clause is a contradiction. 


Global Variables 

CONTRA-LIST 

This is a list of all the clauses which are contradictions. 

l 

The following variables are global to certain procedures in the TMS. 

CONTRA-CLAUSE 

This is used to construct the new clause resulting from the 
appearance of contradictions. It is global to the internal version 
of SET-TRUTH. 

; * ' 

CONTRA-SOURCE 

This is the contradiction which initialized the construction 
of a new clause. It is used by the internal version of SET-TRUTH 
to terminate the construction of the new clause. 

REMOVED-LIST 

This is used by REMOVE-TRUTH to keep track of nodes whose 
truth values have been removed. 
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ASSlin-LIST 

This is used in FIND-ASSUli for accumulating an alist of the 
assumptions underlying a contradiction associated with their 
maximum distance from the contradiction. The distance to the 
contradiction is the number of clauses in the link between the 
contradiction and the assumption. * 





' \ 
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- The Code 
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827 

828 
029 
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032 


;INITIALIZATION ROUTINES 

(DECLARE (SPECIAL CONTRA-LIST MODE-COUNT CTRACE VPRINT ACCUM 

CONTRA-SOURCE CONTRA-CLAUSE REMOVED-LIST ASSUM-LIST)) 

(DEFUN TMS-INIT () 

(PROG (> 

(PUTPROP ’ TRUE ’FALSE ’OPPOSITE) 

(PUTPROP ’TRUE ’POS-CLAUSES ’CLAUSES) 

(PUTPROP ’TRUE ’NEG-CLAUSES ’OP-CLAUSES) 

(PUTPROP ’TRUE ’MAKE-TRUE ’EFFECT) 

(PUTPROP ’FALSE ’TRUE ’OPPOSITE) 

(PUTPROP ’FALSE ’NEG-CLAUSES ’CLAUSES) 

(PUTPROP ’FALSE ’POS-CLAUSES ’OP-CLAUSES) 

(PUTPROP ’FALSE ’MAKE-FALSE ’EFFECT) 

(SETQ CONTRA-LIST NIL) 

(SETQ CTRACE NIL) 

(SETQ VPRINT NIL))) 


(DEFUN MAKE-DEPENDENCY-NOOE (ASSERTION WHEN-TRUE WHEN-FALSE WHEN-UNKNOWN) 
(PROG (NODE) 

(GENSYM ’N) 

(SETQ NODE (GENSYM)) 

(INTERN NODE) 

(PUTPROP NODE ’UNKNOWN ’TRUTH) 

(PUTPROP NODE NIL ’SUPPORT) 

(PUTPROP NODE ASSERTION ’ASSERTION) 

(PUTPROP NODE WHEN-TRUE ’MAKE-TRUE) 

(PUTPROP NODE WHEN-FALSE ’MAKE-FALSE) 

(PUTPROP NODE WHEN-UNKNOWN ’MAKE-UNK) 

(RETURN NODE))) 


APPNDX 3 



;CLAUSE ADDITION ROUTINES 
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(DEFUN ADD-CLAUSE (CLAUSE-LIST PERSON) 
(ADD-2 CLRUSE-LIST REASON) 
(BACKTRACK)) 


(DEFUN RDD-2 (CLRUSE-LIST REASON) 

(PROG (CLAUSE CLAUSE-NODE COUNT) 
(SETQ COUNT 0) 


(SETQ CLAUSE-NODE (MAKE-DEPENDENCY-NOOE 'CLAUSE NIL NIL NIL)) 
(PUTPROP CLAUSE-NODE 'TRUE 'TRUTH) 

(PUTPROP CLAUSE-NODE 'PREMISE 'SUPPORT) 

(PUTPROP CLAUSE-NODE REASON ’EXPLANATION) 

(COND ((EQ* REASON ’DEFAULT) 

(PUTPROP CLAUSE-NOOE 'TRUE 'DEFAULT))) 


(GENSYM 'C) 

(SETQ CLAUSE (GENSYM)) 

(INTERN CLAUSE) 

(COND (CTRACE 

(PRINT 'INEW-CLAUSE |) 

(PRINC CLAUSE) 

(PRINC '| |> 

(PRINC REASON) 

(PRINT (MAPCAR (FUNCTION (LAMBDA (F) 

(CONS (GET (CAR F) 'ASSERTION) (CDR F>>)) 
CLAUSE-LIST)))) 


(SETQ CLAUSE-LIST (CONS (CONS CLAUSE-NODE ’FALSE) CLAUSE-LIST)) 

(PUTPROP CLAUSE CLAUSE-LIST 'CLAUSE-LIST) 

(MAPC (FUNCTION (LAMBDA (NODE) 

(COND ((NOT (EQ (GET (COR NODE) 'OPPOSITE) 

(GET (CAR NODE) ’TRUTH))) 

(SETQ COUNT (U COUNT)))))) 

CLRUSE-LIST) 

(PUTPROP CLAUSE COUNT 'PSAT) 

(MAPC (FUNCTION (LAMBOA (NODE) 

(PUTPROP (CAR NODE) 

-V (CONS CLAUSE 

(GET (CAR NODE) (GET (CDR NODE) ’CLAUSES))) 
(GET (CDR NODE) 'CLAUSES)))) 

CLAUSE-LIST) 

(COND ((= COUNT 0) 

(SETQ CONTRA-LIST (CONS CLRUSE CONTRA-LIST)))) 

(PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

(DEDUCE-CHECK CLAUSE)) 

(RETURN CLAUSE-NOOE))) 
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;TRUTH VALUE ADDITION ROUTINES 
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(DEFUN SET-TRUTH (NODE VALUE EXPLAN) 

(PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

(PUTPROP NODE EXPLAN ’EXPLANATION) 

(COND <<EQ EXPLAN ’DEFAULT) (PUTPROP NODE VALUE ’DEFAULT))) 

(SET-2 NODE VALUE ’PREMISE) 

(BACKTRACK))) 

(DEFUN SET-2 (NODE VALUE SUPPORT) 

(PROG (TRACE F) 

(COND (VPRINT (PRINT ’|SET TRUTH|) (PRINC NODE) (PRINC VALUE) (PRINC SUPPORT))) 

;TRACE IS TRUE IF A CONTRADICTION HAS RESULTED FROM THIS SET, EITHER DIRECTLY 
»OR AS A CONSEQUENCE OF RESULTING RECURSIVE DEDUCTIONS 

(SETQ TRACE NIL); 

(COND ((NOT (EQ (GET NODE ’TRUTH) ’UNKNOWN)) 

(ERROR ,’SET-TRUTH—VALUE-NOT-UNKNOWN NOOE))) 

(PUTPROP NODE VALUE ’TRUTH) 

(PUTPROP NODE SUPPORT ’SUPPORT) 

(MAPC (FUNCTION (LAMBDA (CLAUSE) (PROG 0 

(PUTPROP CLAUSE (1- (GET CLAUSE ’PSAT)) ’PSAT) 

(COND ((= (GET CLAUSE ’PSAT) 0) 

(SETQ CONTRA-LIST (CONS CLAUSE CONTRA-LIST)) 

(CONO (CTRACE 

(PRINT ’CONTRADICTION) 

(PRINC (GET CLAUSE ’CLAUSE-LIST))))))))) 

(GET NODE (GET VALUE ’OP-CLAUSES))) 

(COND ((GET NODE (GET VALUE ’EFFECT)) 

(APPLY (GET NODE (GET VALUE ’EFFECT)) (LIST (GET NODE ’ASSERTION))))) 

(MAPC (FUNCTION (LAMBDA (CLAUSE) 

(COND ((AND TRACE 

(EQ CLAUSE CONTRA-SOURCE)) 

(ADD-2 CONTRA-CLAUSE ’CLAUSE-RESOLUTION) 

(SETQ CONTRA-SOURCE NIL) 

(SETQ TRACE NIL)) 

((AND (= (GET CLAUSE ’PSAT) 8) 

(NULL CONTRA-SOURCE)) 

(SETQ CONTRA-SOURCE CLRUSE) 
i (SETQ CONTRA-CLAUSE (MERGE CLAUSE NIL NOOE NIL)) 

(SETQ TRACE ’TRUE)) 

((SETQ F (DEOUCE-CHECK CLAUSE)) 

(SETQ TRACE ’TRUE) 

(SETQ CONTRA-CLAUSE 

(MERGE CLAUSE CONTRA-CLAUSE NODE (CAR F))))))> 

(GET NODE (GET; VALUE ’OP-CLAUSES))) 

(RETURN TRACE))) 

* . ’ ■ . 

: ! ' 

(DEFUN DEDUCE-CHECK (CLRUSE) ;THE FACT DEDUCED IS RETURNED ONLY IF fi CONTRADICTION RESULTED. 
(PROG <F) 

(COND <(RNO (= (GET CLRUSE ’PSRT) 1) 

(SETQ F (PCONSEQ CLAUSE)) 

(SET-2 (CAR F) (COR F) CLAUSE)) 

(RETURN F>> 

(T (RETURN NIL))))) 


(DEFUN PCONSEQ (CLAUSE) 

(DO CLIST (GET CLAUSE ’CLAUSE-LIST) (COR CLIST) ■ 

(NULL CLIST) 

(COND ((EQ (GET (CARR CLIST) ’TRUTH) ’UNKNOUN) 
(RETURN (CRR CLIST)))))) 

(DEFUN MERGE (CLAUSE RCCUM EXCEPT1 EXCEPT2) 

(PROG () 

(MAPC (FUNCTION (LAMBDA (NOOE) 

(COND ((NOT (OR (EQ (CAR NODE) EXCEPT1) 

(EQ (CAR NOOE) EXCEPT2) 
(MEMBER NODE ACCUM))) 
(SETQ RCCUM (CONS NODE RCCUM)))))) 
(GET CLRUSE ’CLAUSE-LIST)) 

(RETURN RCCUM))) 
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;TRUTH VALUE REMOVAL ROUTINES 
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(DEFUN REMOVE-TRUTH (NODE) 
(PROG (REMOVEO-LIST) 
(REMOVE-2 NODE) 


(MAPC (FUNCTION (LAMBDA (DOT) 

(PROG (NODE) 

(SETQ NODE (CAR OOT)) 

(COND ((NOT (EQ (GET NODE ’TRUTH) ’UNKNOWN)) (RETURN T))) 


(NOOE-DEOUCE-CHECK NODE ’TRUE) 

(NOOE-DEOUCE-CHECK NODE ’FALSE)))) 

REMOVEO-LIST) 

(MAPC (FUNCTION (LAMBOA (OOT) 

(PROG (NODE) 

(SETQ NODE (CAR DOT)) 

(COND ((NOT (EQ (GET NOOE ’TRUTH) ’UNKNOUN)) (RETURN T))) 

(CONO ((GET NOOE ’OEFAULT) 

(PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

(PUTPROP NOOE ’DEFAULT ’EXPLANATION) 

(SET-2 NODE (GET NODE ’DEFAULT) ’PREMISE))))))) 

REMOVEO-LIST))) 

(OEFUN REMOVE-2 (NODE) 

(PROG (VALUE) 

(COND (VPRINT (PRINT ’|REMOVE-VALUE j) 

(PRINC NOOE))) 

(SETQ VALUE (GET NOOE ’TRUTH)) 

(COND ((EQ VALUE ’UNKNOUN) 

(ERROR ’REMOVE-VALUE—VALUE-NOT-PRESENT NODE))) 

(PUTPROP NOOE ’UNKNOUN ’TRUTH) 

(PUTPROP NOOE NIL ’SUPPORT) 

(SETQ REMOVEO-LIST (CONS (CONS NOOE VALUE) REMOVEO-LIST)) 

(MAPC (FUNCTION (LAMBOA (CLAUSE) (PROG () 

(PUTPROP CLAUSE <U (GET CLAUSE ’PSAT)) ’PSAT) 

(CONO ((= (GET CLAUSE ’PSAT) I) 

(SETQ CONTRA-LIST (DELQ CLAUSE CONTRA-LIST))))))) 

(GET NODE (GET VALUE ’OP-CLAUSES))) 

*» 

(COND ((GET NODE'’MAKE-UNK) 

(APPLY (GET NODE ’MAKE-UNK) (LIST (GET NODE ’ASSERTION))))) 

(MAPC (FUNCTION (LAMBOA (CLAUSE) (PROG <F> 

(COND ((AND (> (GET CLAUSE ’PSAT) 1) 

(SETQ F (CAR (CONSEQ CLAUSE))) 

(EQ CLAUSE (GET F ’SUPPORT))) 

(REMOVE-2 F))>))) 

(GET NODE (GET VALUE ’OP-CLAUSES))))) 

(DEFUN CONSEQ (CLAUSE) 

(DO CLIST (GET CLAUSE ’CLAUSE-LIST) (COR CLIST) 

(NULL CLIST) 

(COND ((EQ (GET (CAAR CLIST) ’TRUTH) (CDAR CLIST)) 

(RETURN (CAR CLIST)))))) 

) 

(DEFUN NODE-DEDUCE-CHECK (NOOE VALUE) 

(PROG (CONTRA-SOURCE CONTRA-CLAUSE) 

(DO C-LIST (GET NODE (GET VALUE ’CLAUSES)) (COR C-LIST) 

(OR (NULL C-LIST) 

(EQ (GET NOOE ’TRUTH) VALUE)) 

(OEOUCE-CHECK (CAR C-LIST))))) 







$EXPLANflTION AND BACKTRACKING ROUTINES 
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862 
063 


(DEFUN WHY (OBJECT) 


(PROG (SUPPORT CL 1ST WHY-LIST) 

(CONO <<SETQ CLIST (GET OBJECT ’CLRUSE-LIST)) 

(RETURN UIAPCRR (FUNCTION (LRMBDfi (F) (CAR F))) CLIST))) 

<T 

(SETQ SUPPORT (GET OBJECT ’SUPPORT)) 

(COND ((EQ SUPPORT ’PREMISE) (RETURN ’PREMISE)) 

(T (DO CLIST (GET SUPPORT ’CLRUSE-LIST) (COR CLIST) 

(NULL CLIST) 

(CONO ((NOT (EQ (CAAR CLIST) OBJECT)) 

P (SETQ WHY-LIST (CONS (CAAR CLIST) WHY-LIST))))) 

, (RETURN WHY-LIST))))))) 


(DEFUN BACKTRACK () 

(PROG (ASSUMPTION ASSUM-LIST) 

(SETQ ASSUMPTION NIL) 

(SETQ ASSUM-LIST NIL) 

(COND ((NULL CONTRA-LIST) 

(RETURN T))) 

(DO CONTRA CONTRA-LIST (CDR CONTRA) 
(OR (NOT (NULL ASSUM-LIST)) 
(NULL CONTRA)) 


(MAPC (FUNCTION (LAMBDA (NODE) (FIND-ASSUM NODE 1))) 

(WHY (CAR CONTRA)))) 

; \ 

(DO <(DO-ASSUM ASSUM-LIST (COR OO-ASSUM)) 

(MIND 1000 MIND)) 

((NULL DO-ASSUM)) 

(COND ((< (CDAR DO-ASSUM) MIND) 

(SETQ MIND (CDAR DO-ASSUM)) 

(SETQ ASSUMPTION (CAAR DO-ASSUM))))) 

(COND ((NULL ASSUMPTION) 

(PRINT ’|CONTRADICTION DEPENDS ON NO ASSUMPTIONS!) 
(RETURN NIL)) 

(T (REMOVE-TRUTH ASSUMPTION))) 

(BACKTRACK))) 


(DEFUN FINO-ASSUM (NODE LEVEL) 

(PROG (SUPPORT ASSC) 

(SETQ SUPPORT (GET NODE ’SUPPORT)) 

(COND ((EQ SUPPORT ’PREMISE) 

(COND ((EQ (GET NODE ’EXPLANATION) ’DEFAULT) 

(COND ((SETQ ASSC (ASSOC NODE ASSUM-LIST)) 

(RPLACD ASSC (MAX LEVEL (CDR ASSC)))) 

(T (SETQ ASSUM-LIST (CONS (CONS NODE LEVEL) ASSUM-LIST)))))) 
(T (MAPC (FUNCTION (LAMBOA (NOOE)(FINO-ASSUM NOOE (1+ LEVEL)))) 

(WHY NODE)))))) 

(OEFUN SATISFY (NODES) 

(MAPC (FUNCTION (LAMBDA (NODE) 

(COND ((NOT (EQ (GET NODE ’TRUTH) ’UNKNOWN)) 

(PUTPROP NODE ’TRUE ’DEFAULT)) 

(T (SET-TRUTH NODE ’TRUE ’DEFAULT))))) 

NODES)) 


(TMS-INIT) 



V 


i 


\ ' 

; \ 
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fiDO-2 . EXPR 002 008 FIND-RSSUH . 

f \ RDD-CLRUSE . EXPR 002 004 I1RKE-DEPENDENCY-N0DE 

BRCKTRRCK . EXPR 805 817 HERGE . 

C0NSEQ . EXPR 004 054 N00E-0E0UCE-CHECK .. 

OEOUCE-CHECK . EXPR 003 052 SET-2. 

TMS-1NIT .. EXPR 081 006 WHY .. 
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EXPR 

005 

845 

PCONSEQ . 

•••••• EXPR 

883 

860 

EXPR 

001 

021 

REHOVE-2 . 


004 

828 

EXPR 

003 

066 

REMOVE-TRUTH . 


084 

084 

EXPR 

004 

068 

SATISFY . 

. EXPR 

005 

856 

EXPR 

003 

Oil 

SET-TRUTH _ 

. EXPR 

803 

004 

EXPR 

005 

804 























